Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa
File:                     c0540611-3f02-385f-ae3f-b838ce9aef5d.roa (raw, json)
Hash identifier:          Nk/q5+rvPGbxkmp7ejrLp9+u4E5rwnb/stEONu9nVOQ=
Subject key identifier:   6B:3D:74:E7:38:F8:B4:73:6A:30:6B:92:5F:1D:1B:B7:25:CE:B6:74
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584F4112B6355D4D633670400A40
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        198.187.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:b6:35:5d:4d:63:36:70:40:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=3e823a17-a893-4880-892b-e1b83012fcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ea:3b:bb:3e:93:7a:8b:f7:15:12:fe:dc:8f:
                    28:7b:9e:85:26:16:05:d4:7c:a6:58:d5:48:c5:86:
                    73:0b:45:d9:e3:e4:70:97:be:9d:3d:14:3e:18:e3:
                    3c:c1:f7:1a:ea:2c:35:0b:d1:ca:fc:df:c9:c3:58:
                    98:15:c4:37:21:28:70:49:ae:9b:88:b7:e4:59:f7:
                    a8:ac:89:99:f3:f2:51:04:96:f0:9d:25:25:11:ca:
                    fd:bf:21:b6:24:61:53:8f:ff:20:12:fc:63:63:ba:
                    65:d3:91:da:e0:da:d9:d3:16:0f:c6:43:dc:e7:6a:
                    aa:6f:75:fc:cb:cc:88:18:80:69:3f:92:18:20:3b:
                    82:16:ab:61:dc:2e:3e:17:15:fc:71:86:05:fe:4e:
                    a9:b9:f1:00:8d:2e:2d:e0:7c:5c:db:fc:cd:04:cd:
                    31:57:87:ba:22:77:26:1d:d5:a1:3c:19:23:39:38:
                    77:ed:f3:d5:bd:d0:20:30:42:70:5d:1a:60:64:a5:
                    d9:8b:96:7c:c8:d9:b6:83:48:0b:c5:d5:df:5a:b7:
                    9e:d6:45:4b:69:da:6a:fe:55:cd:3b:da:94:de:98:
                    3b:38:fe:01:bd:b4:18:91:e7:cf:2a:d1:de:f6:86:
                    02:1c:8a:d9:24:70:1a:c7:0a:7e:7e:94:75:2f:86:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3D:74:E7:38:F8:B4:73:6A:30:6B:92:5F:1D:1B:B7:25:CE:B6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c0540611-3f02-385f-ae3f-b838ce9aef5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:71:3c:50:53:6c:f4:6c:57:22:5e:79:b0:a9:45:ef:41:17:
         8e:89:23:23:5f:b2:a9:0e:88:5f:eb:ff:60:c5:a7:71:57:2a:
         64:f3:b1:ff:d2:5f:ec:5c:e6:3e:51:71:3f:33:5b:fc:83:b6:
         4a:40:6d:74:48:ee:52:e7:b4:99:56:c7:f9:06:6f:b1:f5:6b:
         dd:9d:1e:eb:41:37:70:6d:7a:29:b1:b8:e1:25:ed:a8:6b:d2:
         8f:be:c6:19:77:8b:e1:64:4c:03:89:e2:7b:80:17:91:5d:88:
         90:a3:2a:30:0c:04:11:6a:a6:c1:d8:1f:cd:8c:60:ea:f4:9a:
         8b:b0:5c:ea:4d:21:ea:f0:ae:fe:e1:83:0a:94:a4:5b:6d:1e:
         09:cb:70:e7:fe:4e:75:e0:4a:59:b5:67:f8:6d:9b:9f:3c:4c:
         fd:f5:6c:52:5b:5e:21:7f:1b:da:a9:e1:72:50:26:22:fb:97:
         33:be:70:78:97:6f:43:80:fd:37:8f:97:ef:32:9a:0c:6f:10:
         21:fb:d3:0b:d3:bd:f9:71:98:2e:22:aa:11:78:50:0b:63:93:
         00:42:40:01:9b:dd:c2:21:b0:24:19:0a:df:2f:27:53:bd:4b:
         22:48:8b:22:ac:68:60:13:23:b9:b0:89:2b:a2:b2:7d:4c:b1:
         d5:98:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:09:33 2026 by rpki-client